Skip to content

Commit

Permalink
[AHK] Automatic update 👽
Browse files Browse the repository at this point in the history
  • Loading branch information
snovvcrash committed Feb 5, 2023
1 parent 0c213b2 commit e54b35c
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 1 deletion.
1 change: 1 addition & 0 deletions pentest/infrastructure/ad/av-edr-evasion/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -97,6 +97,7 @@ Note that we don't have to target the exact .NET Framework version when compilin

- [https://www.naksyn.com/edr%20evasion/2022/09/01/operating-into-EDRs-blindspot.html](https://www.naksyn.com/edr%20evasion/2022/09/01/operating-into-EDRs-blindspot.html)
- [https://github.com/naksyn/Pyramid](https://github.com/naksyn/Pyramid)
- [https://gist.github.com/snovvcrash/39263ccae8e07210c3f87c9472b4c908](https://gist.github.com/snovvcrash/39263ccae8e07210c3f87c9472b4c908)



Expand Down
2 changes: 1 addition & 1 deletion pentest/infrastructure/ad/credentials-dump/ntds.md
Original file line number Diff line number Diff line change
Expand Up @@ -150,7 +150,7 @@ password = '<PASSWORD>'
nthash = '' if password else '<NTHASH>'
domain = hostname.split('.', 1)[1]
smbConn = SMBConnection(remoteName=hostname, remoteHost=hostname)
smbConn.login(user='snovvcrash', password='Passw0rd!', domain=domain, nthash=nthash)
smbConn.login(user='snovvcrash', password=password, domain=domain, nthash=nthash)
remOps = RemoteOperations(smbConnection=smbConn, doKerberos=False)
remOps.enableRegistry()
bootKey = remOps.getBootKey()
Expand Down

0 comments on commit e54b35c

Please sign in to comment.